CN112003859A - Data encryption method and device and decryption method and device - Google Patents

Abstract

The present disclosure relates to a data encryption method, device, and decryption method and device, and relates to the technical field of information security. The encryption method includes: according to the data frame characteristics of the extracted plaintext data frame, using a key generation algorithm to generate a key; using the key, encrypting the plaintext data frame to obtain the ciphertext data frame, the data frame of the ciphertext data frame The feature has a mapping relationship with the data frame feature of the plaintext data frame; the ciphertext data frame is sent to the decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm.

Description

Data encryption method and device and decryption method and device

technical field

The present disclosure relates to the technical field of information security, and in particular, to a data encryption method, a data encryption device, a data decryption method, a data decryption device, an electronic device, a data transmission system, and a non-volatile computer-readable storage medium.

Background technique

At present, the application of CAN (Controller Area Network) bus at home and abroad is more and more extensive, especially in the automobile and construction machinery industries, CAN bus communication is particularly important in data transmission occasions with high real-time requirements. Therefore, the safety of CAN bus communication has been paid more and more attention.

In the related art, the encrypted transmission of data is realized by using a fixed key or by transmitting a dynamic key between the two communicating parties.

SUMMARY OF THE INVENTION

The inventor of the present disclosure found that the above-mentioned related art has the following problems: the key is easy to be intercepted and captured, which causes the encryption method to be easily cracked, thereby reducing the communication security.

In view of this, the present disclosure proposes a data encryption technical solution, which can improve communication security.

According to some embodiments of the present disclosure, a method for encrypting data is provided, including: generating a key by using a key generation algorithm according to data frame characteristics of an extracted plaintext data frame; and using the key to encrypt the plaintext The data frame is encrypted to obtain a ciphertext data frame, the data frame characteristics of the ciphertext data frame and the data frame characteristics of the plaintext data frame have a mapping relationship; the ciphertext data frame is sent to the decryption device, so that the The decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm.

In some embodiments, using a key generation algorithm according to the data frame characteristics of the extracted plaintext data frame, and generating the key includes: generating the secret key according to the data frame characteristics of at least one data segment in the extracted plaintext data frame. The data segment of the plaintext data frame and the ciphertext data frame includes a frame start segment, an arbitration segment, a control segment, a data segment, a CRC (Cyclic Redundancy Check, cyclic redundancy check) segment, an ACK (Acknowledge, At least one of the response) segment and the end-of-frame segment.

In some embodiments, the data frame characteristics include the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, CAN-ID (Controller Area Network Identification) at least one of.

In some embodiments, the mapping relationship includes: the data frame feature of the ciphertext data frame is the same as the data frame feature of the plaintext data frame; or the data frame feature of the ciphertext data frame is transformed with the The data frame characteristics of the plaintext data frame are the same.

In some embodiments, the encryption method further comprises: processing the collected data into a CAN data frame as the plaintext data frame; wherein, the sending the ciphertext data frame to the decryption device comprises: using a CAN bus Send the ciphertext data frame to the decryption device.

According to other embodiments of the present disclosure, providing a method for decrypting data includes: receiving a ciphertext data frame sent by an encryption device, wherein the data frame feature of the ciphertext data frame and the data frame feature of the corresponding plaintext data frame have mapping relationship; according to the data frame feature of the extracted ciphertext data frame, use the mapping relationship to determine the data frame feature of the plaintext data frame; according to the data frame feature of the plaintext data frame, use a key generation algorithm to generate a key; using the key, decrypt the ciphertext data frame to obtain a plaintext data frame.

In some embodiments, using a key generation algorithm according to the data frame characteristics of the plaintext data frame, and generating the key includes: generating the encryption key according to the data frame characteristics of at least one data segment in the plaintext data frame. The data segment of the plaintext data frame and the ciphertext data frame includes at least one of a frame start segment, an arbitration segment, a control segment, a data segment, a CRC segment, an ACK segment, and a frame end segment.

In some embodiments, the data frame characteristics include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and CAN-ID.

In some embodiments, the mapping relationship includes: the data frame feature of the ciphertext data frame is the same as the data frame feature of the plaintext data frame; or the data frame feature of the ciphertext data frame is transformed with the The data frame characteristics of the plaintext data frame are the same.

In some embodiments, the decryption method further includes: outputting the acquired plaintext data frame to a relevant component, so that the relevant component can perform corresponding processing.

According to further embodiments of the present disclosure, a data encryption device is provided, comprising: an encryption module configured to generate a key by using a key generation algorithm according to the data frame characteristics of the extracted plaintext data frame, and using the key, Encrypting the plaintext data frame to obtain a ciphertext data frame, the data frame feature of the ciphertext data frame and the data frame feature of the plaintext data frame have a mapping relationship; a sending module is used to send the ciphertext data frame. The frame is sent to a decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm.

In some embodiments, the encryption module generates the key according to the data frame characteristics of at least one data segment in the extracted plaintext data frame. The data segments of the plaintext data frame and the ciphertext data frame include at least one of a frame start segment, an arbitration segment, a control segment, a data segment, a CRC segment, an ACK segment, and a frame end segment.

In some embodiments, the data frame characteristics include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and CAN-ID.

In some embodiments, the mapping relationship includes: the data frame feature of the ciphertext data frame is the same as the data frame feature of the plaintext data frame; or the data frame feature of the ciphertext data frame is transformed with the The data frame characteristics of the plaintext data frame are the same.

In some embodiments, the sending module sends the ciphertext data frame to the decryption device through a CAN bus.

In some embodiments, the encryption device further includes a data collection module for collecting data to be transmitted. The encryption module processes the data to be transmitted into a CAN data frame as the plaintext data frame.

According to further embodiments of the present disclosure, there is provided a data decryption device, comprising: a receiving module configured to receive a ciphertext data frame sent from an encryption device, wherein the data frame characteristics of the ciphertext data frame and corresponding plaintext data The data frame feature of the frame has a mapping relationship; the decryption module is used to determine the data frame feature of the plaintext data frame according to the data frame feature of the extracted ciphertext data frame by using the mapping relationship, and according to the data frame feature of the plaintext data frame. For the data frame feature, a key generation algorithm is used to generate a key, and the key is used to decrypt the ciphertext data frame to obtain a plaintext data frame.

In some embodiments, the decryption module generates the key according to a data frame feature of at least one data segment in the plaintext data frame, and the data segment of the plaintext data frame and the ciphertext data frame includes a frame start At least one of the initial segment, the arbitration segment, the control segment, the data segment, the CRC segment, the ACK segment, and the frame end segment.

In some embodiments, the data frame characteristics include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and CAN-ID.

In some embodiments, the mapping relationship includes: the data frame feature of the ciphertext data frame is the same as the data frame feature of the plaintext data frame; or the data frame feature of the ciphertext data frame is transformed with the The data frame characteristics of the plaintext data frame are the same.

In some embodiments, the decryption apparatus further includes a data output module, configured to output the acquired plaintext data frame to a relevant component, so that the relevant component can perform corresponding processing.

According to still further embodiments of the present disclosure, there is provided an electronic device comprising: a memory; and a processor coupled to the memory, the processor configured to execute the above based on instructions stored in the memory device The encryption method of data in any one of the embodiments, or the decryption method of data.

According to further embodiments of the present disclosure, a data transmission system is provided, comprising: at least one first data transmission device, including the data encryption device or electronic device in any of the foregoing embodiments; at least one second data transmission device, A decryption apparatus or electronic device including the data in any of the above embodiments.

According to further embodiments of the present disclosure, there is provided a non-volatile computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the data encryption method or data in any of the foregoing embodiments decryption method.

In the above embodiment, the key is generated according to the current data frame characteristics, and the data is encrypted and transmitted. In this way, dynamic encryption of data can be achieved without passing a key during data transmission, thereby improving communication security.

Description of drawings

The accompanying drawings, which form a part of the specification, illustrate embodiments of the present disclosure and together with the description serve to explain the principles of the present disclosure.

The present disclosure may be more clearly understood from the following detailed description with reference to the accompanying drawings, wherein:

FIG. 1 shows a flowchart of some embodiments of the encryption method of data of the present disclosure;

FIG. 2 shows a flowchart of some embodiments of the decryption method of data of the present disclosure;

3 shows a schematic diagram of some embodiments of an apparatus for encrypting and decrypting data of the present disclosure;

FIG. 4 shows a schematic diagram of other embodiments of the data encryption device and decryption device of the present disclosure;

Figure 5 shows a schematic diagram of some embodiments of the data transmission system of the present disclosure;

6 shows a schematic diagram of other embodiments of the data transmission system of the present disclosure;

7 illustrates a block diagram of some embodiments of an apparatus for encrypting data of the present disclosure;

8 illustrates a block diagram of some embodiments of a decryption apparatus for data of the present disclosure;

9 illustrates a block diagram of some embodiments of electronic devices of the present disclosure;

10 illustrates a block diagram of further embodiments of the electronic device of the present disclosure;

Figure 11 shows a block diagram of some embodiments of the data transmission system of the present disclosure.

Detailed ways

Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of the components and steps, the numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present disclosure unless specifically stated otherwise.

Meanwhile, it should be understood that, for the convenience of description, the dimensions of various parts shown in the accompanying drawings are not drawn in an actual proportional relationship.

The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the disclosure, its application or uses in any way.

Techniques, methods, and devices known to those of ordinary skill in the relevant art may not be discussed in detail, but where appropriate, such techniques, methods, and devices should be considered part of the authorized description.

In all examples shown and discussed herein, any specific value should be construed as illustrative only and not as limiting. Accordingly, other examples of exemplary embodiments may have different values.

It should be noted that like numerals and letters refer to like items in the following figures, so once an item is defined in one figure, it does not require further discussion in subsequent figures.

As mentioned above, the key generation cannot be dynamically changed, and it needs to be sent to the relevant parties through the bus for storage, which will result in low communication security. Moreover, the transmission of the key also occupies limited bus bandwidth and storage resources, which adversely affects the stability of data communication and embedded storage.

In view of the above technical problems, the present disclosure generates a dynamic key according to data characteristics after the bus data is formed. In this way, there is no need to store keys in the device, saving limited embedded storage resources. Moreover, the key changes with the change of the data frame data, and neither the key nor the ciphertext data is fixed, which improves data security.

In addition, in view of the technical problem that the dynamic key needs to exchange data between the two communication parties, the key disclosed in the present disclosure has been transmitted during the transmission of the data frame. That is to say, the key is hidden in the data frame and does not need to be sent separately, thereby effectively reducing the bus load and improving the security level. For example, the technical solutions of the present disclosure can be implemented through the following embodiments.

FIG. 1 shows a flowchart of some embodiments of the encryption method of data of the present disclosure.

As shown in FIG. 1 , the encryption method includes: step 110 , generating a key according to the characteristics of the plaintext data frame; step 120 , obtaining the ciphertext data frame by using the key; and step 130 , sending the ciphertext data frame.

In step 110, a key is generated by using a key generation algorithm according to the data frame characteristics of the extracted plaintext data frame.

In some embodiments, the key is generated according to the data frame characteristics of at least one data segment in the extracted plaintext data frame. The data segments of the plaintext data frame and the ciphertext data frame include at least one of a frame start segment, an arbitration segment, a control segment, a data segment, a CRC segment, an ACK segment, and a frame end segment.

For example, the data frame characteristics include the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and at least one item of CAN-ID.

In step 120, using the key, the plaintext data frame is encrypted to obtain the ciphertext data frame. The data frame characteristics of the ciphertext data frame and the data frame characteristics of the plaintext data frame have a mapping relationship.

In some embodiments, the mapping relationship includes: the data frame characteristics of the ciphertext data frame are the same as the data frame characteristics of the plaintext data frame; or the data frame characteristics of the ciphertext data frame after transformation are the same as the data frame characteristics of the plaintext data frame.

In some embodiments, keys may be generated based on various data frame characteristics. Use the generated key to encrypt the data. After the encryption operation, the data frame characteristics of the ciphertext and the data frame characteristics of the plaintext remain unchanged. Or the data frame feature of the ciphertext can be obtained by processing the data frame feature of the plaintext according to a preset transformation method. In this way, the decryptor can re-extract the key through the ciphertext.

In some embodiments, the encryption process may be performed in multiple steps, and each step performs key extraction and encryption operations to form the final ciphertext. For example, the first key can be generated by using the data frame characteristics of the plaintext, and the first ciphertext can be generated by using the first key encryption; the second key can be generated by using the data frame characteristics of the first ciphertext, and encrypted using the second key Generate a second ciphertext; repeat the above steps until the iterative conditions are met to generate the final ciphertext.

In step 130, the ciphertext data frame is sent to the decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm.

In some embodiments, the collected data is processed into CAN data frames as plaintext data frames; the ciphertext data frames are sent to the decryption device through the CAN bus.

FIG. 2 shows a flowchart of some embodiments of the decryption method of data of the present disclosure.

As shown in FIG. 2, the decryption method includes: step 210, receiving a ciphertext data frame; step 220, determining the characteristics of the plaintext data frame; step 230, generating a key according to the characteristics of the plaintext data frame; and step 240, acquiring the plaintext data frame.

In step 210, the ciphertext data frame sent by the encryption device is received. The data frame feature of the ciphertext data frame has a mapping relationship with the data frame feature of the corresponding plaintext data frame.

In step 220, according to the data frame characteristics of the extracted ciphertext data frame, the data frame characteristics of the plaintext data frame are determined by using the mapping relationship. For example, the two communicating parties can negotiate a key extraction method (including a mapping relationship) and a data encryption algorithm before information and data communication, so that the encryption and decryption methods of the two parties are consistent.

In step 230, a key is generated by using a key generation algorithm according to the data frame characteristics of the plaintext data frame.

In step 240, using the key, the ciphertext data frame is decrypted to obtain the plaintext data frame.

In some embodiments, the decryption process may be performed in multiple steps, and each step performs key extraction and decryption operations to form the final plaintext. For example, the first key can be generated by using the data frame characteristics of the ciphertext, and the first plaintext can be generated by decrypting the first key; the second key can be generated by using the data frame characteristics of the first plaintext, and the second key can be decrypted to generate Second plaintext; repeat the above steps until the iterative conditions are met to generate the final plaintext. Iterative conditions (such as the number of iterations) can be negotiated by both parties before data communication.

In some embodiments, the acquired plaintext data frame is output to the relevant component, so that the relevant component can perform corresponding processing.

3 shows a schematic diagram of some embodiments of an apparatus for encrypting and decrypting data of the present disclosure.

As shown in FIG. 3 , the encryption module in the encryption device may include a plaintext data key extraction unit and a data encryption unit. The decryption module in the decryption device may include a ciphertext data key extraction unit and a data decryption unit.

In some embodiments, the sender forms plaintext data to be sent (CAN plaintext data frame) by means of data collection or the like. The plaintext data key extraction unit extracts the data frame features of the plaintext to generate a key for data encryption. Through the data encryption unit, the key is combined with the plaintext data to perform data transformation to obtain ciphertext data (CAN ciphertext data). The sender sends the ciphertext data to the receiver through the CAN bus.

In some embodiments, the recipient receives ciphertext data from the CAN bus. The ciphertext data key extraction unit extracts the data frame features of the ciphertext to generate a key for data decryption. Through the data decryption unit, the key is combined with the ciphertext data to perform data transformation to obtain plaintext data. Correlative processing is performed on plaintext data, and corresponding signals are output to related components.

FIG. 4 shows a schematic diagram of other embodiments of the apparatus for encrypting and decrypting data of the present disclosure.

As shown in FIG. 4 , both the encryption device and the decryption device can be integrated into an ECU (Electronic Control Unit, electronic control unit) as a data transmission device as a sender or receiver in data transmission.

In some embodiments, the ECU may include an MCU (Micro Control Unit, micro control unit) control module, a data acquisition module, a CAN transceiver module, a data output module, a power supply module, and the like. At least one of the encryption module and the decryption module may be integrated in the MCU control module.

For example, the data acquisition module of the ECU as the sender collects relevant data, and forms a CAN data frame after being processed by the MCU control module. The MCU control module uses the key generation method to generate a key according to the extracted CAN data frame characteristics. The MCU control module generates ciphertext through single or multiple encryption processing. The CAN transceiver module sends the ciphertext to the receiver.

For example, the CAN transceiver module of the receiver ECU receives the ciphertext and transmits it to the MCU control module. The MCU control module uses the same key generation method as the sender to generate a key according to the extracted ciphertext data frame characteristics. The MCU control module obtains the plaintext through single or multiple decryption processing. The data output module drives the relevant components to work according to the corresponding signal generated by the plaintext.

FIG. 5 shows a schematic diagram of some embodiments of the data transmission system of the present disclosure.

As shown in FIG. 5 , the data transmission system in the CAN bus communication network may include multiple ECUs. For example, the data transmission system includes 3 ECUs (ECU1, ECU2, ECU3) and 2 terminating resistors (eg 120Ω).

Each ECU can either act as a sender (including an encryption device) or as a receiver (including a decryption device). That is, each ECU not only sends ciphertext data to the CAN bus, but also receives ciphertext data from the CAN bus.

Each ECU is connected to the CAN bus through CAN_H (high data line) and CAN_L (low data line). The data exchanged on the CAN bus is encrypted data, and the key is unified. In this way, the amount of bus data is not increased, and the security level is improved;

In the above embodiment, the data transmission system includes several ECUs, and each ECU has the relevant modules required by the ECU in the data encryption and decryption system. The communication between each ECU is encrypted communication, following the principle of key extraction.

For different ECUs, due to the different data in each segment (such as using different CAN-IDs, sending different data, etc.), the extracted keys are also different. For the same ECU, the keys extracted from different data frames are also different.

In this way, multiple sets of keys exist simultaneously in the data transmission system during the communication process, so as to achieve the purpose of using the dynamic key for encryption and decryption, and improve the security. Also, the keys do not need to be transmitted on the bus, which does not increase the bus load.

FIG. 6 shows a schematic diagram of other embodiments of the data transmission system of the present disclosure.

As shown in Figure 6, after the data transmission system is powered on, program initialization is performed.

In step 610, it is determined whether encrypted data to be processed is received. If not received, step 620 is executed to enter the data collection and processing program; if received, step 660 is executed to enter the decryption key extraction program.

In step 620, data collection is performed, and the collected data is processed into a CAN bus data frame.

In step 630, an encryption key is generated according to the extracted data frame features.

In step 640, the CAN bus data frame is encrypted with an encryption key to obtain encrypted data.

In step 650, the encrypted data is sent to the receiver using the CAN bus.

In step 660, the data frame features of the encrypted data are extracted to generate a decryption key.

In step 670, the encrypted data is decrypted using the decryption key to obtain the CAN bus data frame.

In step 680, the CAN bus data frame is processed into related signals and then output to related components.

In the above embodiment, in view of the communication security problem, the encryption and decryption keys are generated by performing feature analysis and data extraction on the data. Since the key is hidden in the data and propagated on the network along with the data, it does not need to be sent separately and does not occupy the bus bandwidth resources.

Moreover, key data does not need to be stored separately, saving hardware resources. The key is generated according to data extraction and follows the data change when the data changes, which realizes dynamic key encryption and improves the security of encryption.

7 illustrates a block diagram of some embodiments of an apparatus for encrypting data of the present disclosure.

As shown in FIG. 7 , the data encryption device 7 includes an encryption module 71 and a transmission module 72 .

The encryption module 71 uses a key generation algorithm to generate a key according to the data frame characteristics of the extracted plaintext data frame. The encryption module 71 uses the key to encrypt the plaintext data frame to obtain the ciphertext data frame. The data frame characteristics of the ciphertext data frame and the data frame characteristics of the plaintext data frame have a mapping relationship.

The sending module 72 sends the ciphertext data frame to the decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm.

In some embodiments, the encryption module 71 generates a key according to the data frame characteristics of at least one data segment in the extracted plaintext data frame. The data segments of the plaintext data frame and the ciphertext data frame include at least one of a frame start segment, an arbitration segment, a control segment, a data segment, a CRC segment, an ACK segment, and a frame end segment.

In some embodiments, the data frame characteristics include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and CAN-ID.

In some embodiments, the mapping relationship includes: the data frame characteristics of the ciphertext data frame are the same as the data frame characteristics of the plaintext data frame; or the data frame characteristics of the ciphertext data frame after transformation are the same as the data frame characteristics of the plaintext data frame.

In some embodiments, the sending module 72 sends the ciphertext data frame to the decryption device through the CAN bus.

In some embodiments, the encryption device 7 further includes a data collection module 73 to collect the data to be transmitted. The encryption module 71 processes the data to be transmitted into CAN data frames as plaintext data frames.

8 shows a block diagram of some embodiments of a decryption apparatus for data of the present disclosure.

As shown in FIG. 8 , the data decryption device 8 includes a decryption module 81 and a receiving module 82 .

The receiving module 82 receives the ciphertext data frame sent by the encryption device. The data frame feature of the ciphertext data frame has a mapping relationship with the data frame feature of the corresponding plaintext data frame.

The decryption module 81 uses the mapping relationship to determine the data frame characteristics of the plaintext data frame according to the data frame characteristics of the extracted ciphertext data frame. The decryption module 81 uses a key generation algorithm to generate a key according to the data frame characteristics of the plaintext data frame. The decryption module 81 uses the key to decrypt the ciphertext data frame to obtain the plaintext data frame.

In some embodiments, the decryption module 81 generates the key according to the data frame characteristics of at least one data segment in the plaintext data frame. The data segments of the plaintext data frame and the ciphertext data frame include at least one of a frame start segment, an arbitration segment, a control segment, a data segment, a CRC segment, an ACK segment, and a frame end segment.

In some embodiments, the data frame characteristics include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and CAN-ID.

In some embodiments, the mapping relationship includes: the data frame characteristics of the ciphertext data frame are the same as the data frame characteristics of the plaintext data frame; or the data frame characteristics of the ciphertext data frame after transformation are the same as the data frame characteristics of the plaintext data frame.

In some embodiments, the decryption apparatus 8 further includes a data output module 83, configured to output the acquired plaintext data frame to the relevant components, so that the relevant components can perform corresponding processing.

9 illustrates a block diagram of some embodiments of electronic devices of the present disclosure.

As shown in FIG. 9 , the electronic device 9 of this embodiment includes a memory 91 and a processor 92 coupled to the memory 91 , and the processor 92 is configured to execute any one of the present disclosure based on instructions stored in the memory 91 The data encryption method in the embodiment, or the data decryption method.

The memory 91 may include, for example, a system memory, a fixed non-volatile storage medium, and the like. The system memory stores, for example, an operating system, an application program, a boot loader (Boot Loader), a database, and other programs.

10 illustrates a block diagram of further embodiments of the electronic device of the present disclosure.

As shown in FIG. 10 , the electronic device 10 of this embodiment includes: a memory U10 and a processor U20 coupled to the memory U10, and the processor U20 is configured to execute any one of the foregoing embodiments based on instructions stored in the memory U10 The encryption method of the data in, or the decryption method of the data.

The memory U10 may include, for example, a system memory, a fixed non-volatile storage medium, and the like. The system memory stores, for example, an operating system, an application program, a boot loader (Boot Loader), and other programs.

The electronic device 10 may further include an input/output interface U30, a network interface U40, a storage interface U50, and the like. These interfaces U30, U40, U50 and the memory U10 and the processor U20 can be connected, for example, through a bus U60. The input and output interface U30 provides connection interfaces for input and output devices such as a display, a mouse, a keyboard, a touch screen, a microphone, and a speaker. Network interface 840 provides a connection interface for various networked devices. The storage interface U50 provides a connection interface for external storage devices such as SD cards and U disks.

FIG. 11 shows a block diagram of some embodiments of the data transmission system of the present disclosure.

As shown in FIG. 11 , the data transmission system 11 includes at least one first data transmission device U111 and at least one second data transmission device U112.

The first data transmission device U111 includes the data encryption device or electronic device in any of the above embodiments.

The second data transmission device U112 includes the data decryption device or electronic device in any of the above embodiments.

As will be appreciated by one skilled in the art, embodiments of the present disclosure may be provided as a method, system, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable non-transitory storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein .

So far, the data encryption method, data encryption apparatus, data decryption method, data decryption apparatus, electronic device, data transmission system, and nonvolatile computer-readable storage medium according to the present disclosure have been described in detail. Some details that are well known in the art are not described in order to avoid obscuring the concept of the present disclosure. Those skilled in the art can fully understand how to implement the technical solutions disclosed herein based on the above description.

The methods and systems of the present disclosure may be implemented in many ways. For example, the methods and systems of the present disclosure may be implemented in software, hardware, firmware, or any combination of software, hardware, and firmware. The above-described order of steps for the method is for illustration only, and the steps of the method of the present disclosure are not limited to the order specifically described above unless specifically stated otherwise. Furthermore, in some embodiments, the present disclosure can also be implemented as programs recorded in a recording medium, the programs including machine-readable instructions for implementing methods according to the present disclosure. Thus, the present disclosure also covers a recording medium storing a program for executing the method according to the present disclosure.

While some specific embodiments of the present disclosure have been described in detail by way of examples, those skilled in the art will appreciate that the above examples are provided for illustration only, and are not intended to limit the scope of the present disclosure. Those skilled in the art will appreciate that modifications may be made to the above embodiments without departing from the scope and spirit of the present disclosure. The scope of the present disclosure is defined by the appended claims.

Claims (17)

1. A data encryption method, comprising: According to the data frame characteristics of the extracted plaintext data frame, a key generation algorithm is used to generate a key; Using the key, the plaintext data frame is encrypted to obtain a ciphertext data frame, and the data frame feature of the ciphertext data frame has a mapping relationship with the data frame feature of the plaintext data frame; Sending the ciphertext data frame to a decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm. 2. The encryption method according to claim 1, wherein, according to the data frame feature of the extracted plaintext data frame, using a key generation algorithm, the key generation comprises: The key is generated according to the data frame characteristics of at least one data segment in the extracted plaintext data frame, and the data segments of the plaintext data frame and the ciphertext data frame include a frame start segment, an arbitration segment, a control segment, and a data segment. At least one of the segment, the cyclic redundancy check CRC segment, the response ACK segment, and the frame end segment. 3. The encryption method according to claim 1, wherein, The data frame features include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and the controller area network identification CAN-ID. 4. The encryption method according to claim 1, wherein, The mapping relationship includes: The data frame characteristics of the ciphertext data frame are the same as the data frame characteristics of the plaintext data frame; or The data frame characteristics of the ciphertext data frame after transformation are the same as the data frame characteristics of the plaintext data frame. 5. The encryption method according to any one of claims 1-4, further comprising: Processing the collected data into a controller area network CAN data frame as the plaintext data frame; Wherein, the sending the ciphertext data frame to the decryption device includes: The ciphertext data frame is sent to the decryption device through the CAN bus. 6. A method for decrypting data, comprising: Receive the ciphertext data frame sent by the encryption device, the data frame feature of the ciphertext data frame and the data frame feature of the corresponding plaintext data frame have a mapping relationship; According to the data frame feature of the extracted ciphertext data frame, using the mapping relationship, determine the data frame feature of the plaintext data frame; According to the data frame feature of the plaintext data frame, use a key generation algorithm to generate a key; Using the key, the ciphertext data frame is decrypted to obtain the plaintext data frame. 7. The decryption method according to claim 6, wherein, using a key generation algorithm according to the data frame feature of the plaintext data frame, the key generation comprises: The key is generated according to the data frame characteristics of at least one data segment in the plaintext data frame, and the data segments of the plaintext data frame and the ciphertext data frame include a frame start segment, an arbitration segment, a control segment, and a data segment. At least one of the segment, the cyclic redundancy check CRC segment, the response ACK segment, and the frame end segment. 8. The decryption method according to claim 6, wherein, The data frame features include at least one of the data length of the data frame, the number of 0s contained in each data segment in the data frame, the number of 1s contained in each data segment in the data frame, and the controller area network identification CAN-ID. 9. The decryption method according to claim 6, wherein, The mapping relationship includes: The data frame characteristics of the ciphertext data frame are the same as the data frame characteristics of the plaintext data frame; or The data frame characteristics of the ciphertext data frame after transformation are the same as the data frame characteristics of the plaintext data frame. 10. The decryption method according to any one of claims 6-9, further comprising: The acquired plaintext data frame is output to the relevant component, so that the relevant component can perform corresponding processing. 11. A data encryption device, comprising: The encryption module is used for generating a key according to the data frame characteristics of the extracted plaintext data frame, using a key generation algorithm, and using the key to encrypt the plaintext data frame to obtain a ciphertext data frame, the encrypted data frame. The data frame feature of the text data frame has a mapping relationship with the data frame feature of the plaintext data frame; A sending module, configured to send the ciphertext data frame to a decryption device, so that the decryption device decrypts the ciphertext data frame according to the mapping relationship and the key generation algorithm. 12. The encryption device of claim 11, further comprising: The data acquisition module is used to collect the data to be transmitted; Wherein, the encryption module processes the to-be-transmitted data into a controller area network CAN data frame as the plaintext data frame. 13. A data decryption device, comprising: a receiving module for receiving the ciphertext data frame sent by the encryption device, the data frame feature of the ciphertext data frame and the data frame feature of the corresponding plaintext data frame have a mapping relationship; The decryption module is used for determining the data frame characteristics of the plaintext data frame according to the data frame characteristics of the extracted ciphertext data frame and using the mapping relationship, and using the key generation algorithm according to the data frame characteristics of the plaintext data frame. , generate a key, and use the key to decrypt the ciphertext data frame to obtain a plaintext data frame. 14. The decryption device of claim 13, further comprising: The data output module is configured to output the acquired plaintext data frame to the relevant components, so that the relevant components can perform corresponding processing. 15. An electronic device comprising: memory; and a processor coupled to the memory, the processor configured to perform the encryption method of data of any one of claims 1-5, or claims 6-10, based on instructions stored in the memory The decryption method of any one of the data. 16. A non-volatile computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the data encryption method of any one of claims 1-5, or claims 6- 10. The decryption method of any one of the data. 17. A data transmission system, comprising: At least one first data transmission device, comprising the data encryption device of claim 11 or 12 or the electronic device of claim 15; At least one second data transmission device includes the data decryption device of claim 13 or 14 or the electronic device of claim 15 .

Images